Skip to main content

Posts

Showing posts from September, 2011

Super privilege accounts, an IT double bind

IT organization must be able to demonstrate that even Windows administrator and Unix root and related super privilege accounts can be controlled. It must be emphasized very strongly that it is inviolable to business to make mistake induced by IT in a surprising manner. Inadvertent use and access to these accounts can be devastating to business and its reputation to stakeholders. Meaning all systems are being used by everyone, authorized, without the IT people having to look, tinker and update configuration from time to time. Everything is final in the production systems except for regular software including firmware updates that must be applied, still they must be approved first. Though there are chokepoints (software are released but will require regular update, and stability, if any, is achieved that way only) where a system malfunctions, they are only temporary and can be fixed easily by focusing on an affected account or process. They don’t impact business system or whole IT operat...